The DevSecOps Engineering (DSOE) course explains how DevOps security practices differ from other security approaches and provide the education needed to understand and apply data and security sciences. Participants learn the purpose, benefits, concepts, and vocabulary of DevSecOps; particularly how DevSecOps roles fit with a DevOps culture and organisation. At the end of this course, participants will understand using “security as code” with the intent of making security and compliance consumable as a service.

As companies are pushing code faster and more often than ever, the rate of vulnerabilities in our systems is accelerating. As we are being asked to do more with less, DevOps has shown immense value to business and security as an integral component that needs to be integrated into the strategy. Topics covered in the course include how DevSecOps provides the business value of DevOps and the ability DevOps has to enable the business and support an organisational transformation with the ultimate goal of increasing productivity, reducing risk, and optimizing cost in the organisation.

The course is designed to teach practical steps on how to integrate security programs into DevOps practices and highlights how professionals can use data and security science as the primary means of protecting the organisation and customer.

Using real-life scenarios and case studies, participants will have tangible takeaways to leverage when back at the office.

This course positions learners to successfully complete the DevSecOps Engineering exam, which is offered on the last day of class for classroom learners. Virtual learners will receive a voucher for a webcam proctored exam which they can schedule at their convenience.

The learning objectives include a practical understanding of:

• The purpose, benefits, concepts, and vocabulary of DevSecOps
• How DevOps security practices differ from other security approaches
• Business-driven security strategies
• Understanding and applying data and security sciences
• The use and benefits of Red and Blue Teams
• Integrating security into Continuous Delivery workflows
• How DevSecOps roles fit with a DevOps culture and organisation

• Sixteen (16) hours of instructor-led training and exercise facilitation
• Digital Learner Manual (excellent post-class reference)
• Participation in exercises designed to apply concepts
• Sample documents, templates, tools and techniques
• Access to additional sources of information and communities

The target audience for the DevSecOps Engineering course are professionals including:

• Anyone involved or interested in learning about DevSecOps strategies and automation
• Anyone involved in Continuous Delivery toolchain architectures
• Compliance Team
• Delivery Staff
• DevOps Engineers
• IT Managers
• IT Security Professionals, Practitioners, and Managers
• Maintenance and support staff
• Managed Service Providers
• Project & Product Managers
• Quality Assurance Teams
• Release Managers
• Scrum Masters
• Site Reliability Engineers
• Software Engineers
• Testers